The tab-links "Panel layout settings" and "Panel content" is visible for all authenticated users. I've looked at the source code and there is no access control on those links. Is it possible to remove them in some way?

Comments

sun’s picture

sun
Primary language German
Location Karlsruhe
commented
Title: Panel layout settings Panel content visible for all user » Panel admin links visible for all users
Category: support » bug
liquidcms’s picture

liquidcms commented
Priority: Normal » Critical

i don't see this for all roles, but i do see it for some even though no permissions granted to that role.

not sure why still open this long; setting to critical as module is unusable if users can go in and edit site layout.

merlinofchaos’s picture

merlinofchaos commented
Status: Active » Closed (won't fix)

I quickly glanced over the code, and there *is* access control on this, and it calls through to Drupal's node_access() function. This can only happen if the user in question actually has the ability to edit the node. In this case, it's not Panel's fault.